set ForwardedAllowIPS via cli